Shellter

Shellter is a dynamic shellcode injection tool aka dynamic PE infector. It can be used in order to inject shellcode into native Windows applications (currently 32-bit apps only). The shellcode can be something yours or something generated through a framework, such as Metasploit.

Shellter takes advantage of the original structure of the PE file and doesn’t apply any modification such as changing memory access permissions in sections (unless the user wants to), adding an extra section with RWE access, and whatever would look dodgy under an AV scan.

It is particularly useful for antivirus evasion techniques, as referenced in PEN-200 training materials.

Shellter performs dynamic shellcode injection into 32-bit Windows PE files without altering the original file structure in ways that trigger AV detection, such as modifying section permissions or adding RWE sections unless explicitly requested by the user.